Attachment 1_SOW ICIDS 17 May 2021 HLP W9124C-21-T-5025.pdf

81st

National Center for Credibility Assessment

Integrated Commercial Intrusion Detection System (ICIDS IV)

Maintenance and Service 17 May 2021

Statement of Work

NCCA

SUBJECT: ICIDS Maintenance/Service

1 | P a g e

Part I – Scope

GENERAL INFORMATION

This is a non-personal services contract to provide Integrated Commercial Intrusion Detection System (ICIDS) IV Maintenance and Service (M&S) to the standalone network systems for the National Center for Credibility Assessment (NCCA) located at Fort Jackson, South Carolina.

This is for all three collateral facilities and one Sensitive Compartmented Information Facility (SCIF) on the NCCA Campus. The Contractor shall provide all required aspects of technical guidance and maintenance and perform the services stated in this SOW for the ICIDS IV alarm and automated entry systems. Contractor employees performing the services stated in this SOW shall be accountable solely to the contractor who, in turn shall be responsible to the Government.

The Contractor shall ensure that its employees comply with the work stated in this SOW. The Contractor shall not create or modify Federal policy, obligate funds of the United States Government, oversee the work of Federal employees, provide direct personal services to any Federal employee, or otherwise violate the prohibitions set forth in Federal Acquisition Regulation (FAR) Parts 7.5 and 37.1. The Government will control access to the facilities and will perform the inspection and acceptance upon completion of the work. (ICIDS-IV IAW U.S.

Army Fort Jackson will have software upgrade in the near future to ICIDS-V)

Background:

In 2008, NCCA was approved by DIA for the pre-construction of a SCIF to conduct daily operations and missions. This new additional security posture with added access controls required NCCA to ensure the security system connectivity with the monitoring response service was integrated for the actions in response to natural or man-made crises, and to prevent unexpected or undesired intrusion, disruption, or interruption of normal duties being performed at NCCA during and after hours.

In 2011, Prior to the completed construction of the NCCA SCIF, the U.S. Army and Fort Jackson Directorate of Emergency Services (DES) physical security and monitoring response service notified NCCA and recommended we change and/or migrate to the Army’s new approved and contracted security Intrusion Detection System (IDS) called “Integrated Commercial Intrusion Detection System (ICIDS III). The Fort Jackson command recommended ICIDS III security system post wide for directorates and tenant units to continue response services. In 2011, NCCA’s SCIF was constructed and accredited based on our entire security and access control systems for all three buildings IAW the Intelligence Community Directive and Intelligence Community Standards (ICD/ICS) Number 705; which rescinded Director of Central Intelligence Directive (DCID) 6/9.

In 2017, Fort Jackson installed and updated all ICIDS III users to the version software & hardware to ICIDS IV. Since then, we have had minimal service provided without any annual maintenance or service agreements. There are over four alarm zones that provide protection to the four facilities (7540, 7540 SCIF, 7541, 7542) and connectivity to the Directorate of

2 | P a g e

Emergency Services (DES) located on Fort Jackson has the responsibility for emergency and alarmed events responses and connectivity is required 24/7 yearly.

In 2021, Fort Jackson surveyed NCCA ICIDS IV into the upgrades required by U.S. Army to ICIDS V; which is scheduled to be upgraded approximately 2021 from ICIDS IV to V. Both ICIDS servers and both operators workstations will have the software upgrades from ICIDS IV to V.

Objectives:

The maintenance and service should be semi-annually to prevent failure of components and operations (ICIDS IV Alarm and Automated Entry System).

• The contractor shall provide a service plan consisting of semi-annual evaluations, repairs or replacement of non-working components provided by the government inventory to maintain the ICIDS IV system. Resolve issues internal to the IDS ICICS-IV and/or provide resolutions to the Government in the plan.

Upon completion and/or successful installations, configuration, and repairs; the ICIDS IV must be tested as defined in this SOW and IAW ICD/ICS 705 and the DoDM 5105-21, the contractor shall present the onsite government representative with an acceptance form including a checklist of work completed and any recommended parts, to be signed by the Government.

1. Scope:

The contractor shall provide trained and certified staff in ICIDS IV & V; technical personnel must be fully qualified and certified to perform installation, maintenance, and repairs services in accordance with the standards established by the manufacturer (Certified in DAQ SMS Software and ICIDS Hardware). The ICIDS IV is comprised of components, sensors, connections (copper and fiber optic), system wiring, control units, and conduit throughout the facilities. Contractor shall administer, repair, and maintain all new and existing ICIDS IV systems on the installation associated with one year and 4 option years for maintenance and service for the ICIDS-IV system

2. Tasks:

Provide a certified qualified personnel to travel twice annually to NCCA at Fort Jackson, SC to perform maintenance duties, complete checklist and resolve pending (identified) issues at all four

(4) NCCA Facilities.

3. Performance:

Period of Performance: 1 June 2021 – 31 May 2026 Phase In (If applicable): N/A Base Year: 1 June 2021 – 31 May 2022

3 | P a g e

Option Years 1-4: 1 June 2022 – 31 May 2023 1 June 2023 – 31 May 2024 1 June 2024 – 31 May 2025 1 June 2025 – 31 May 2026

4. Quality Control:

4.1. Quality Control is the responsibility of the Contractor. The Contractor shall develop, implement, and maintain a Quality Control Program (QCP) to ensure all work described in this contract is performed at or above the standard defined in the Performance Requirements Summary (PRS). The QCP is developed by the contractor to ensure that it performs and delivers high-quality service and products. And it shall include methods of documenting and enforcing quality control operations of both prime contractor and or subcontractor work; including inspection and testing.

4.2. The Contractor shall submit their QC Plan as part of the contractor’s proposal if QCP will be evaluated or within ten days of contract award. After acceptance of the QCP, the contractor shall receive the contracting officer’s (KO) acceptance in writing or any proposed changes to the QC procedures. The contractor shall submit QCP changes within five (5) days to the KO and Contracting Officer’s Representative (COR) for review and approval prior to implementation. The Quality Control Plan shall address as a minimum:

4.2.1. Inspection System. The contractor shall develop, implement and maintain a system to inspect their services as well as their subcontractor services and products to ensure compliance with PWS requirements, and applicable laws and regulations.

It shall specify tasks or areas to be inspected on a scheduled or unscheduled basis, the manner in which inspections are to be conducted, the titles of the individuals who will perform the inspections, and the percentage of the work that will be inspected on a recurring basis.

4.2.2. Inspection Files. The contractor shall document all inspections conducted, and the necessary corrective and preventive actions taken.

4.2.3. Deficiency Identification, Prevention and Correction. The QCP shall include a method of identifying and preventing deficiencies in the quality of services performed before the level of performance becomes unacceptable as defined in the PRS, without dependence upon Government direction. The contractor shall identify and prevent defects in quality of products and services performed before the level becomes unacceptable and before they are provided to the Government. The QCP at a minimum shall address process control and continuous process improvement;

procedures for scheduling, conducting and documentation of inspection;

discrepancy identification; procedures for root cause analysis; corrective and preventive action procedures to include procedures for addressing Government discovered non-conformances; procedures for trend analysis; and procedures for

4 | P a g e collecting and addressing customer feedback/complaints. The QCP shall document process control and process performance measurement procedures that shall include how the Contractor shall implement preventive corrective actions. The Contractor shall demonstrate that it has designed quality into the delivery of services thereby mitigating the risk(s) associated with delivery of deficient or nonconforming services.

4.3. The contractor shall keep records on-site of all inspections conducted by the

Contractor and necessary corrective action taken. These documents shall be available for inspection by the Government during the term of the contract.

4.4. The QCP shall contain methods of communications (direct and indirect) with the

Government regarding performance of the contract. Communication shall include regular and formal meetings with the Government for review and analyses of key process indicators, analysis of process deficiencies, and problem resolution.

4.5. The QCP shall have a customer comment processing system for correction of

Contracting Officers Representative (COR) validated comments received verbally or through the Interactive Customer Evaluation (ICE) program. The system should be designed to provide feedback to the Government based on customer contact, investigation of derogatory comments, rebuttal to derogatory comments, or corrective action(s). Government collected and graded customer satisfaction comment cards will be part of the Government’s performance evaluation process. The contractor shall document all customer complaints and report the complaint to the COR within one workday after receipt of complaint. The contractor shall use electronic mail or other written memoranda as notification. Each customer complaint reported to the COR shall have a scheduled completion date subject to COR approval.

4.6. Detail how continuous quality improvement will be a sustaining focus throughout the QCP and report monthly via a Process Improvements Tracker (PIT) ongoing initiatives to streamline processes, improve service and detail benefits to the Government.

4.7. Upon request from the COR, the Contractor shall provide, all reports generated as a result of the Contractor’s quality control efforts. This shall include any summary information used to track quality control, including any charts/graphs.

4.8. Contractor Discrepancy Report (CDR): When the Contractor's performance is unsatisfactory, a CDR will be issued. The Contractor shall reply in writing within five (5) work days from the date of receipt of the CDR, giving the reasons for the unsatisfactory performance, corrective action taken, and procedures to preclude recurrence.

5. Quality Assurance:

Casselman, Tamara M CIV USA ACC REMINDER NOTE: As Applicable:

Ensure COR clause is included in the contract:

DFARS 252.201-7000

CONTRACTING OFFICER'S REPRESENTATIVE (DEC 1991)

Ensure the applicable FAR clause is included in contract:

52.246-2, Inspection of Supplies—Fixed-Price 52.246-3, Inspection of Supplies—Cost-Reimbursement 52.246-4, Inspection of Services—Fixed-Price 52.246-5, Inspection of Services—Cost-Reimbursement 52.246-6, Inspection—Time-and-Material and Labor-Hour 52.246-11; Inspection Higher Level Services

5 | P a g e

5.1. The COR will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the COR must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

When an observation indicates defective performance, the COR will require the Contractor or designated on-site representative to initial the observation to acknowledge the defective performance. The acknowledgement of the observation does not necessarily constitute Contractor concurrence with the observation, only that the Contractor has been made aware of the defective performance.

5.2. Property Management System: The Contractor shall establish a system to manage Government Furnished Equipment (GFE) in its possession to control, use, preserve, protect, repair and maintain. The Property Management System (PMS) must be adequate to satisfy the requirements of the contract.

6. The contractor shall perform preventative maintenance semi-annually on all components of the security alarm and access entry systems on all NCCA facilities in accordance with the manufacturer’s specifications. Contractor shall coordinate the preventative maintenance schedule with the NCCA security site lead. Service shall include, but is not limited to, visual checks, ICIDS IV printers, battery test, operational tests, required adjustments, alignments, programming, replacement of worn parts due to normal wear and tear, and install government furnished software upgrades. Upon conclusion and acceptance of preventative maintenance calls, the contractor shall furnish his report to the COR listing work accomplished and ICIDS system status.

6.1. Replacement/Upgrade of ICIDS IV Server. In the event of a catastrophic failure of the ICIDS IV server, the contractor shall notify the Security Site Lead. The contractor technician and the security site lead will determine is the ICIDS IV server is repairable or if the ICIDS IV server will be replaced with a government furnished ICIDS IV or higher. Before proceeding with upgrade, the contractor must have written consent from the Contracting Officer's Representative to proceed with server upgrade.

6.2. Semi-Annual Equipment Maintenance and Repair. The contractor is responsible for maintenance of the existing ICIDS alarm and automated entry systems, the repair or replacement of the existing alarm equipment and government provided components, and the troubleshooting of the existing system. All ICIDS systems equipment and components shall be repaired and maintained to remain fully functional. If the problem is found to be in the communications lines the contractor will notify the Security site lead; before proceeding with any testing, maintenance, or repair on the security alarm system. The contractor shall coordinate work operations with the Security Site Lead prior to starting and completing each service. When repairs or emergency maintenance will shut down the system or activate alarms, the contractor will notify the Military Police (MP) Desk Alarm Monitor at DES located on Fort Jackson prior to beginning any work and when the work is completed to prevent alarmed events

Casselman, Tamara M CIV USA ACC

REMINDER NOTE:

As Applicable:

Ensure Government Property clause is included in the contract: FAR clause 52.245-1

Contracting Officer's Representative's, Quality Assurance Specialist's and Property Book Officer's additional responsibilities in the absent of a Property Administrator:

When there is not a Property Administrator (PA) on staff at designated locations, the PA duties then fall to the Contracting Officer. There are certain PA duties that cannot be delegated by the Contracting Officer to any other functional specialist. For example, only a Contracting Officer or PA is authorized to conduct Property Management System Analysis (PMSA's), only a Contracting Officer or PA can relieve a contractor of liability for the loss of Government Property, and only a Contracting Officer or PA/PLCO is authorized to conduct contract property closeout actions. When a PA/PLCO is not available, a COR, Quality Specialist or Property Book Officer may "ASSIST" the contracting officer, but the Contracting Officer is "UTIMATELY" responsible for the property administration.

The Requiring Activity, COR, nor the Property Book officer can access financial liability against a Contractor for the damage or loss of GFP. Contractors are subject to the terms of the contract not Army Regulations. The contracting officer is the only person who can hold a contractor liable for loss of GFP.

6 | P a g e

6.3. Contractor Manpower Reporting: Contractor Manpower Reporting: The contractor will report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the National Center for Credibility Assessment via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address: http://www.ecmra.mil, and then click on “Department of the Army CMRA” or the icon of the DoD organization that is receiving or benefitting from the contracted services.

6.4. Reporting inputs will be for the labor executed during the period of performance during each Government FY, which runs from October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October of each calendar year, beginning with 2013. Contractors may direct questions to the help desk by clicking on “Send an email” which is located under the Help Resources ribbon on the right side of the login page of the applicable Service/Component’s CMR website at http://www.ecmra.mil. The required data fields include:

a. Contracting Office, Contracting Officer, Contracting Officer's Technical Representative;

b. Contract number, including task and delivery order number;

c. Beginning and ending dates covered by reporting period;

d. Contractor name, address, phone number, e-mail address, identity of contractor employee-entering data;

e. Estimated direct labor hours (including sub-contractors);

f. Estimated direct labor dollars paid this reporting period (including sub- contractors);

g. Total payments (including sub-contractors);

h. Predominant Product Service Code (PSC)/Federal Service Code (FSC) reflecting services provided by contractor (and separate predominant PSC/FSC for each sub-contractor if different);

i. Estimated data collection cost;

j. Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information);

k. Locations where contractor and sub-contractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website);

l. Presence of deployment or contingency contract language; and

m. Number of contractor, and sub-contractor employees deployed in theater this reporting period (by country).

7. General:

The contractor shall take all measures at all times to prevent damage to Government and personal property. Property damaged during work shall be restored to previous condition by the contractor, at no additional cost to the Government.

7.1. The contractor shall prepare and adhere to a safety plan at all times in accordance with OSHA safety requirements and guidance.

http://www.ecmra.mil/ http://www.ecmra.mil/

7 | P a g e

7.2. In the event of a service call or system failure, the security site lead will notify the COR and immediately the contractor for service requirements. The contractor shall be available to receive calls immediately by telephone seven (7) days a week, 24 hours a day, throughout the duration of this contract. The contractor shall respond via telephone to all service calls within 24 hours of the initial call from the security site lead or the COR. If parts are not available from the NCCA designated storage area, the contractor shall notify the security site lead. All routine maintenance (any maintenance performed during normal duty hours—Monday thru Friday, 0730-1630), adjustments, or repairs of the ICIDS IV system will include deficiencies from the inspection results and work requests submitted by the security site lead to the COR. Services to be performed under this contract are generally performed during normal duty hours of operation.

7.3. Equipment list to be maintained by building number:

ICIDS-IV REQUIREMENTS FOR SCIF IN BUILDING 7540:

a.) Controlled access in and out via a swipe card and key pad/pin for: two (2) interior, single-width doors (Day door portal 185 and Primary or “Vault” door portal 186).

b.) Local controller will be swipe and keypad pin.

c.) Three (3) infrared motion sensors are required for room186.

d.) One (1) infrared motion sensor is required for room187.

e.) One (1) infrared motion sensor is required for room188.

f.) Emergency egress over-ride buttons is on Portal 185.

g.) Two (2) Magnet locks and (2) BMS for the two portals doors (185 and 186) h.) ICIDS-IV SCIF server is located in room 187; it serves as the ICIDS operator workstation and enrollment station.

i.) SCIF RADC and local controller is located in room 187.

j.) ICIDS-IV SCIF server is in an existing full-sized server rack provided by NCCA.

k.) On a dedicated pair of single mode fiber-optic the SCIF server reports alarms to the PMO

Monitoring Station, building 5499, Ft. Jackson, S.C.

ICIDS-IV REQUIREMENTS FOR BUILDING 7540

a.) Controlled access in and out via a swipe card for:

i. One (1) exterior, single-width door (Portal 173)

ii. Two (2) exterior, double-width doors (Portals 176 and 177)

iii. Two (2) interior, single-width doors (Portals 101 and 178 to 177)

iv. One (1) interior. Single width doors in hallways (Lobby, 2nd floor landing Portals

101 – 6 doors and rear stairwell 173 1st and 2nd floor) b.) Emergency egress out for one (1) single-width door (Portal 183).

c.) Emergency egress over-ride buttons is on all portal doors.

d.) Magnet locks and BMS for all portal doors.

e.) Two (2) ICIDS-IV monitoring/workstations; one with enrollment station to be located in room 108; the second in SCIF, room 188.

8 | P a g e f.) ICIDS-IV server will be located in room 180; CAT5 dedicated cabling already exists between this room and the two operator stations located in SCIF 188 and Front Desk 108.

g.) ICIDS-IV server may is in an existing full-sized server rack. This ICIDS-IV server consolidate signals/data and control ICIDS-IV system in Buildings 7541 and 7542 also.

h.) On a dedicated pair of single mode fiber-optic the server reports alarms to the PMO Monitoring Station, building 5499, Ft. Jackson, SC.

ICIDS-IV REQUIREMENTS FOR BUILDING 7541

i. Two (2) exterior, single-width doors (Portal 101 and 115).

ii. One (1) exterior, double-width door (Portal 126).

iii. One (1) interior, single-width door (Portal 104 to 126).

b.) Emergency egress out for one (1) single-width door (Portal 126).

c.) Emergency egress over-ride buttons is on all portal doors.

d.) Magnet locks and BMS for all portal doors.

e.) The ICIDS-IV server for 7541 is located in room 180, Building 7540. The ICIDS system has a dedicated pair of single mode fiber-optic strains from/to 7541 to 7540.

ICIDS-IV REQUIREMENTS FOR BUILDING 7542

i. One (1) exterior, single-width door (Portal 107A).

ii. One (1) exterior, double-width door (Portal 107B).

b.) Emergency egress out for two (2) single-width doors (Portal 101).

c.) Emergency egress over-ride buttons is on all portals doors.

d.) Magnet locks and BMS for all portal doors.

e.) The ICIDS-IV server for 7542 is located in room 180, Building 7540. The ICIDS system has a dedicated pair of single mode fiber-optic strains from/to 7540 to 7542.

Part II – General Requirements, Completion Criteria, and Project Controls

1. Applicable Regulations and Guidance:

Work shall be completed in accordance with all current codes, regulations, and related addenda including all local, county, state, and federal agencies having jurisdiction over any portion of the work to be performed under this contract. In the event of conflicting guidance, the more stringent guidance will be followed. This includes, but is not limited to:

a.) Unified Facilities Criteria (UFC), namely for buildings and security requirements.

b.) International Building Codes (IBC, IPC, IMC) c.) National Fire Protection Association (NFPA), namely NFPA 101

9 | P a g e d.) American National Standards Institute (ANSI) e.) American Standards of Testing Materials (ASTM) f.) Environmental Protection Agency (EPA) g.) Occupational Safety and Health Agency (OSHA) h.) Army Safety Program AR 385-10, U.S. Army Corps of Engineers Safety and Health Requirements Manual, EM 385–1–1, Fort Jackson Safety Regulation 385- 10, and the Code of Federal Regulations Title 29 Part 1910 (29 CFR 1910) and Title 29 Part 1926 (29 CFR 1926).

2. Safety:

a.) The contractor and subcontractors shall prepare and adhere to a safety plan at all times in accordance with OSHA safety requirements, Army Safety Program AR 385-10, U.S. Army Corps of Engineers Safety and Health Requirements Manual, EM 385–1–1, Fort Jackson Safety Regulation 385-10, and the Code of Federal Regulations Title 29 Part 1910 (29 CFR 1910) and Title 29 Part 1926 (29 CFR 1926) including but not limited to lockout/tagout procedures.

3. Environmental: N/A

4. Progress Reports:

In accordance with completion and acceptance in paragraph one. Report shall include work completed, recommendations and system status.

5. Scheduling of Work:

5.1. The Contractor shall provide any unscheduled routine services during normal duty hours of 0730 – 1600, Monday through Friday, except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government-directed facility closings.

5.2. Contractor shall coordinate with security for site visits and copy the COR.

6. Quality Assurance:

The Contracting Officer reserves the right to conduct any inspections or perform any tests deemed necessary at any time during the execution of the contract to determine conformance with the requirements of these specifications. Work procedures, and materials selection will be examined to determine the conformance with the requirements of this specification.

7. Submittals: N/A

8. Working Conditions:

10 | P a g e

The contractor shall keep the site area clean and free of materials or objects that compromise the safety of DOD personnel or others.

9. Final Inspection and Acceptance: N/A

10. Warranty:

All newly added equipment by the contractor shall be tested and the warranty information shall be maintained by the Contractor for three years.

11. Project Schedule:

Project performance period shall be 1 year from time of award with 4 option years for maintenance and service for the ICIDS-IV system.

12. Risk Management:

Follow all safety precautions and consult the Contracting Officer’s Representative if there are any issues.

13. AT & OPSEC:

13.1. AT Level 1 training. All contractor employees, to include subcontractor employees, requiring access Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 30 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website:

http://jko.jten.mil

13.2. Access and general protection/security policy and procedures. This standard language is for contractor employees with an area of performance within Army controlled installation, facility, or area. Contractor and all associated sub-contractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

13.3. Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), http://jko.jten.mil/

11 | P a g e or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

13.4. iWatch Training. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR.

This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award.

13.5. OPSEC Training. Per AR 530-1 Operations Security, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter.